Extracted

• • Target
    COMPANY PROFILE.exe
  • Size 871KB
  • SHA256 edcb91258edc5deacd80a38b737db1b9d3bce985be94322e80d5d606f38aa67f
  • MD5 fa6fb1e12559f088fa14a7762d91e682
  • SHA1 64ac3930d770f24eb895cbe711bdde7648a6ea39
  • SHA512 f706fc905330b9becdea859fd1330270605f852fd4c206ae6e339d994a99913c429bbb142858581a667814732b214df13def073ba208399b567d5a2ec6770051
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2